Google plans to move UK users’ accounts outside EU jurisdiction.


Google планирует вывести учетные записи своих британских пользователей из-под контроля со стороны регуляторов конфиденциальности Европейского Союза, взамен предоставив их под юрисдикцию США, подтвердила компания в среду поздно вечером.

Агентство Reuters сообщило о планах ранее в среду, ссылаясь на людей, знакомых с ними.

The shift, prompted by Britain’s exit from the EU, will leave the sensitive personal information of tens of millions with less protection and within easier reach of British law enforcement.

Alphabet Inc’s Google intends to require its British users to acknowledge new terms of service including the new jurisdiction, according to people familiar with the plans.

“Nothing about our services or our approach to privacy will change, including how we collect or process data, and how we respond to law enforcement demands for users’ information,” Google said in an emailed statement. “The protections of the UK GDPR will still apply to these users.”

A spokesman declined to answer questions.

Ireland, where Google and other U.S. tech companies have their European headquarters, is staying in the EU, which has one of the world’s most aggressive data protection rules, the General Data Protection Regulation.

Google has decided to move its British users out of Irish jurisdiction because it is unclear whether Britain will follow GDPR or adopt other rules that could affect the handling of user data, the people said.

If British Google users have their data kept in Ireland, it would be more difficult for British authorities to recover it in criminal investigations.

The recent Cloud Act in the United States, however, is expected to make it easier for British authorities to obtain data from U.S. companies. Britain and the United States are also on track to negotiate a broader trade agreement.

Beyond that, the United States has among the weakest privacy protections of any major economy, with no broad law despite years of advocacy by consumer protection groups.

Google has amassed one of the largest stores of information about people on the planet, using the data to tailor services and sell advertising.

Google could also have had British accounts answer to a British subsidiary, but has opted not to, the people said.

Lea Kissner, Google’s former lead for global privacy technology, said she would have been surprised if the company had kept British accounts controlled in an EU country with the United Kingdom no longer a member.

“There’s a bunch of noise about the U.K. government possibly trading away enough data protection to lose adequacy under GDPR, at which point having them in Google Ireland’s scope sounds super-messy,” Kissner said.

«Никогда не пренебрегайте желанием технологических компаний не оказаться между двумя разными правительствами».

В ближайшие месяцы другие американские технологические компании должны будут сделать аналогичный выбор, согласно людям, вовлеченным во внутренние дискуссии в других местах.

Facebook, который имеет аналогичную настройку для Google, не сразу ответил на запросы о комментарии.